Portscans/PROXY scans
John_York at Dell.com
John_York at Dell.com
Sat Nov 1 21:08:09 UTC 2003
Hey gang,
We're seeing an incredible amount of port- and proxy-scans from 211.0.0.0/8,
and 0 legitimate packets from the same range. I'm thinking about blocking
the entire /8, as noone on our network needs any contact with Asia (I belive
those addresses are all in Asia - correct me if I'm wrong). Has anyone here
blocked 211.? Any unexpected results when doing so?
Thanks,
John
More information about the NANOG
mailing list